JohnXu22786/secret-guard

Name: JohnXu22786/secret-guard
Author: JohnXu22786

插件 ⭐ 0 MIT developer-tools security tools

dsh 安全插件：阻止智能体读写敏感文件（.env、凭据），在工具结果中掩盖泄露的机密信息，提供审计日志，以及安全的 sg_* 检查工具。

catalog 简介：dsh security plugin: blocks agents from reading/writing sensitive files (.env, credentials), masks leaked secrets in tool results, audit journal, safe sg_* inspection tools

↗ 在 GitHub 查看 📄 阅读完整 README

安装

secret-guard/
  package.json         # dsh.bundle.patch declaration; main points at the source
  cordis.patch.yml     # bundle patch layer (plugin line: id / name / config)
  src/
    index.ts           # plugin entry: name / inject / Config / apply
    config.ts          # config schema (schemastery) + validation and defaults
    policy.ts          # rule engine: path normalization, glob compilation, default rule table
    gate.ts            # tools/pre-execute interception listener
    scrub.ts           # tools/post-execute content-masking listener
    inspect.ts         # dotenv parsing, value shape classification, sg_* safety tools
    fingerprint.ts     # HMAC-SHA256 seal key and fingerprints
    journal.ts         # JSONL audit journal + rotation
    watch.ts           # rule-file hot-reload poller
  tests/               # node:test + tsx, runs without compilation
  README.md
  LICENSE

把 JohnXu22786/secret-guard 加入你的 DSH 配置（web profile）即可启用。

README

15.8 KB · 缓存于 2026-08-18 17:12:20 · 15.8 KB

展开完整 README 收起

README 内容为空。

渲染基于仓库 JohnXu22786/secret-guard 的 README.md。在 GitHub 查看原文 →

安装

README

相关插件